4 ms·
What kind of security is that? Don't you think an attacker who can install a key logger could also install a screen grabber? This definitely smells like a false
by andreasvc 14y ago
What kind of security is that? Don't you think an attacker who can install a key logger could also install a screen grabber? This definitely smells like a false sense of security.
- manojlds 14y agoIt might be insecure, but not in the way you mention. You only enter 3 or so characters while logging in. Others are hidden. Screen grabber can get only the three characters. Of course, if you login multiple times, the password can be obtained eventually. But this probably for one time login at a public computer. And yeah, like in many things, these are done to give a false sense of security to the user and some minimal deterrent to the attacker.
- grogers 14y ago8 choose 3 = 56 Even sniffing just one login gives a completely practical attack to gain access to your account, even though the attacker doesn't have the full password. They might not be able to do everything the full password would let them do, but its still not exactly acceptable.